Behavioral task
behavioral1
Sample
f9b97fa567ef8f0ca4fc76a9be4dd39d93744777c63d0e903a65375202aece6f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9b97fa567ef8f0ca4fc76a9be4dd39d93744777c63d0e903a65375202aece6f.exe
Resource
win10v2004-20221111-en
General
-
Target
f9b97fa567ef8f0ca4fc76a9be4dd39d93744777c63d0e903a65375202aece6f
-
Size
79KB
-
MD5
406a6835052a4b44409aef0c04d50d01
-
SHA1
ef99d3983ceaaa3b29363a4704b9e74cd82b67d6
-
SHA256
f9b97fa567ef8f0ca4fc76a9be4dd39d93744777c63d0e903a65375202aece6f
-
SHA512
d910390c890091e94a2772c70b7af137e1fa24c4bcdb5d97c1f4f6f8768601a4febcbef49e86f867a5ea0089cebe9102bebc1f77d61946a9f870e20871aaa4e4
-
SSDEEP
1536:Dl5fAhrH+5v9qe7ZpmDUKlxAFOop4McjBjH59yX+2YVbCpvBr2q4:bfAhriqCUDZoYFjH5p2Gsr27
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f9b97fa567ef8f0ca4fc76a9be4dd39d93744777c63d0e903a65375202aece6f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pmj Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE